android/authenticatorbridge/CHANGELOG.md at ad3a9a6c2e611b842dbb897d542140a15d0a00d8

mirror of https://github.com/bitwarden/android.git synced 2026-03-11 20:54:58 -05:00

Files

Patrick Honkonen 94ed32790f [PM-27752] Add certificate signature verification to AuthenticatorBridge (#6126 )

Co-authored-by: Claude <noreply@anthropic.com>

2025-11-06 13:15:26 +00:00

v1.1.0 (pending)

Added cryptographic certificate signature verification to prevent malicious applications from spoofing Password Manager package names and intercepting TOTP secrets (VULN-314).

Correctly set the AccountSyncState to SyncNotEnabled after binding to the service if the previous state was AppNotInstalled.

Initial release.